The backdoor executes commands to steal information, including processor and system architecture information, computer names and usernames, network information and proxy settings, Menrige wrote, adding it also communicates with a command-and-control server located in Hong Kong.